analyst note

Command Zero has released a public API and MCP server that turn its SOC investigation engine into a callable capability, letting security teams trigger, manage, and close investigations programmatically from within existing SOAR and AI agent workflows. The release reflects a broader market shift toward agentic security operations, where AI handles context-gathering and humans retain decision authority. ECI Research analysts assess the competitive, compliance, and operational implications.